feat(ci): add all-required sentinel job

Adds a single CI / all-required status check that depends on the test
job. This enables branch protection to be configured with a single
required-status-check entry rather than enumerating each matrix variant.

Addresses: molecule-ai/molecule-sdk-python#11

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

.gitea/workflows/ci.yml

@@ -27,3 +27,17 @@ jobs:
 
       - name: Lint
         run: pip install ruff && ruff check molecule_agent/ molecule_plugin/
+
+  all-required:
+    name: all-required
+    needs: [test]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check test result
+        run: |
+          result="${{ needs.test.result }}"
+          if [ "$result" != "success" ]; then
+            echo "Required job test failed (result: $result)"
+            exit 1
+          fi
+          echo "All required jobs passed"

examples/remote-agent/run.py

@@ -41,12 +41,12 @@ import os
 import sys
 
 # Local-dev import path — when installed via pip the molecule_agent package
-# resolves normally; when running from the repo checkout we add the repo root
+# resolves normally; when running from the repo checkout we add sdk/python/
 # to sys.path so you can run `python3 run.py` without a pip install.
 _here = os.path.dirname(os.path.abspath(__file__))
-_repo_root = os.path.normpath(os.path.join(_here, "..", ".."))
-if _repo_root not in sys.path:
-    sys.path.insert(0, _repo_root)
+_sdk = os.path.join(_here, "..", "..", "sdk", "python")
+if os.path.isdir(_sdk) and _sdk not in sys.path:
+    sys.path.insert(0, _sdk)
 
 from molecule_agent import RemoteAgentClient  # noqa: E402